Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: 1cQk+p0FXNY6ECYIvAppLRD17YlACgyDumEbQ5l4ohc=
Subject key identifier: D3:1D:CF:F6:3C:F3:86:E4:2A:74:27:6F:1F:9B:3D:C6:77:CE:F6:D6
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019DA45380F0AAB4EE49DA7B104A98470FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 18CE
Signing time: Sun 19 Apr 2026 06:00:28 +0000
Manifest this update: Sun 19 Apr 2026 06:00:28 +0000
Manifest next update: Mon 20 Apr 2026 06:00:28 +0000
Files and hashes: 1: YYRSpcNyohXAVMmCQRhhQXcor54.roa (hash: fuXM313ONuqmW2wV79N+ZCUER2LAZ4hkP7+nINYw4hI=)
2: iKpp3qI47nAdkGSzRA3WViJJwfU.roa (hash: cua53JtZVRFiG1D02IQc2WZ6uSxKMIhsPK5IrnlN2iI=)
3: vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa (hash: YGEdE5O7bWJqyVhJI5l0CUgDvZQQki89nPNnaYxZHCc=)
4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: xR2mXQoOuCXTs0pa8pyhgbO/e1zCwnE07BjneE3gRnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:80:f0:aa:b4:ee:49:da:7b:10:4a:98:47:0f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Apr 19 06:00:28 2026 GMT
Not After : Apr 20 06:00:28 2026 GMT
Subject: CN=d31dcff63cf386e42a74276f1f9b3dc677cef6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:01:7e:63:27:89:7c:05:f7:84:e8:53:23:
a3:88:f9:7a:bb:c0:1e:73:19:91:64:3b:64:a3:3a:
5d:44:02:69:92:60:26:f2:08:44:33:b9:b0:eb:27:
fb:f5:d3:51:16:11:0a:f9:ba:a4:d6:e9:dd:59:d3:
82:42:6b:d9:1d:c9:b0:21:d5:a4:dd:44:3b:51:eb:
6f:de:f6:b3:23:03:45:fa:ec:9e:ee:68:fe:8a:19:
a0:63:ae:d2:52:d1:66:48:ee:64:de:e5:b1:41:d5:
f5:98:f9:c3:05:da:8b:98:54:e9:c5:d0:ac:1b:2c:
2f:24:75:87:b0:ee:b4:50:11:b4:8c:d2:ed:54:9e:
2a:0b:36:57:13:3a:80:d4:83:b0:7b:00:a0:56:77:
a3:85:3d:25:9c:2a:29:b5:62:2b:56:65:42:c4:93:
c3:63:b7:ab:1a:2d:36:d3:d5:d6:80:69:f1:f2:37:
53:6f:1b:b7:ac:da:03:50:58:e0:72:dd:0f:c2:79:
3b:ea:f8:bb:d6:98:7b:84:c5:3d:18:20:a6:1b:e4:
63:8b:c4:ed:2e:3c:47:1e:e8:1d:fd:b5:ce:fa:69:
73:58:bf:64:c8:c1:66:88:eb:88:3b:f8:b9:39:15:
8d:34:26:b2:e8:ef:c3:a3:59:de:8f:e8:2e:2f:aa:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:CF:F6:3C:F3:86:E4:2A:74:27:6F:1F:9B:3D:C6:77:CE:F6:D6
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f4:29:dc:5b:24:bd:11:71:20:e1:8e:b9:34:a2:03:87:6b:
8d:7b:5c:36:e9:f8:a7:5f:90:20:c7:33:e0:26:d9:28:0b:59:
ca:ba:91:86:9c:38:0b:3d:aa:ef:54:3b:74:5c:7c:69:e7:73:
2d:c9:00:0e:fd:41:22:b6:53:95:be:d0:5c:99:33:79:ba:f7:
d7:73:fb:0b:db:e5:f6:c7:50:b5:0c:64:52:53:c8:68:d5:58:
77:ca:e0:ab:18:75:74:db:01:9b:2b:45:9e:01:ea:dc:84:43:
4e:c6:a8:98:7b:43:7e:1a:88:75:4c:d6:d8:e4:e9:fe:20:40:
1d:62:e7:93:77:19:51:9d:26:33:a5:e7:10:b4:d9:49:19:ca:
13:35:75:32:fe:dc:4c:a5:99:3f:0e:e1:16:ea:cb:bd:c6:19:
f9:87:b0:3c:32:99:22:fe:5e:8d:75:d0:ca:cc:ab:09:83:3b:
e0:d3:41:6e:f5:a9:ce:a2:c7:94:1c:32:dd:ae:a9:b4:9e:ff:
d5:5a:d2:38:46:8b:3f:e8:20:37:7e:07:ed:51:59:5e:56:c0:
d3:c4:ee:62:63:c1:3f:65:0a:72:3b:2d:cc:63:5c:19:dd:2f:
a2:4b:ef:31:bc:1d:2d:1a:38:40:e3:85:92:15:cc:17:40:38:
c6:0d:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:27 2026 by rpki-client